CA
Vendor
Candlepinproject
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-1832 | CA Candlepin Candlepinproject | 8.1 | Oct 4 | An improper access control flaw was found in Candlepin |
| CVE-2021-4142 | CA Candlepin Candlepinproject | 5.5 | Aug 24 | The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw |
| CVE-2015-5187 | CA Candlepin Candlepinproject | 6.5 | Jul 25 | Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic |
| CVE-2012-6119 | CA Candlepin Candlepinproject | – | Apr 2 | Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests |